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BACKGROUND OF THE INVENTION 



Field of the Invention 

5 [0001] The invention relates to computer systems and computer software, and more 
particularly to transaction management in computer systems. 

Description of the Related Art 

10 [0002] Large business systems may include application servers that run multiple 
applications and/or multiple copies of the same application concurrently. Some or all of 
these applications may be transaction oriented and may be capable of conducting many 
transactions simultaneously. Given the potentially large number of data sources, network 
nodes, transmission devices, etc. involved in multiple, simultaneous global transactions, 

15 many different types of errors may occur that may interfere with successful transaction 
completion. Some of these errors may be automatically detectable/correctable by the 
hardware and software components of the system. For example, a message may become 
garbled while traversing a network segment and the receiving node may automatically 
request the message be retransmitted. In another instance, a backend system participating 

20 in a global transaction may crash before committing its transaction branch. In this case 
the manager of the transaction may retain the status of the transaction until the failed 
backend system is back online. The failed system may request the status of the 
transaction from the transaction manager and commit the results of its transaction branch. 
At this point the transaction manager may log the transaction status as completed. 

25 

[0003] In other cases the detection and correction of errors may require various 
degrees of manual intervention. A system administrator or administrative program 
associated with an application server may have access to real time data being logged by a 
transaction manager. Through examination of transaction logs, the administrator may 
30 observe undesirable or erroneous transaction results. For example, a malicious user may 
attempt to perform transactions with the goal of producing unintended results for the 
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benefit of the user and/or detriment of the vendor. This may include gaining access to 
unauthorized information, altering account balances or other information stored in a 
database, and degrading the performance of the vendor's system among numerous other 
possible effects. Not all instances of transactions producing detrimental effects are the 
5 result of maliciousness. Given a large enough pool of users, a certain number of well- 
intentioned transaction attempts will produce unintended results due solely to the 
inability of the application program to anticipate all possible user interactions and provide 
for proper responsive actions. 

10 [0004] While monitoring data from transaction logs, an application server 
administrator may discover anomalous behavior and/or results associated with one or 
more transactions being executed by a transaction manager. At this point, even though 
the erroneous transactions may represent only a small fraction of the total number of 
transactions being processed by the application server, the administrator may be 

15 compelled to take remedial action to prevent database corruption or other serious system 
degradation. Typically such administrative intervention may require taking the 
application server offline thereby disrupting all transactions in progress and rendering all 
functions provided by the server unavailable for some period of time. This disruption of 
service may be extremely inconvenient for users as well as costly for the vendor whose 

20 application is now unable to process order transactions. 



25 
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SUMMARY 



[0005] A transaction manager may be paused so that transactions managed by the 
transaction manager are prevented from making transactional state changes. When all 
5 transactions being coordinated by a transaction manager are paused, the transaction 
manager may be said to be paused or frozen. While the transaction manager is paused, 
the transactions that the transaction manager is supporting may not be allowed to 
complete. A transaction manager may be configured to obtain permission from a 
transaction freeze manager in order to transition the state of a transaction. The 

10 transaction freeze manager may function as a read/write lock manager controlling locks 
on a transaction freeze object. In servicing a transaction state transition request, the 
transaction freeze manager may grant the transaction manager a read lock on the 
transaction freeze object. In servicing a transaction manager pause request, the 
transaction freeze manager may grant an administrative entity a write lock on the 

1 5 transaction freeze object. 

[0006] The transaction manager may request permission to change the state of a 
transaction any time a transaction is ready to make a state transition. For example in the 
case of a global transaction, when an application initiates a transaction, the transaction 

20 manager may request permission to change the state of the transaction from the 
nonexistent state to the active state. When the application executes a commit command, 
the transaction manager may request permission to change the state of the transaction 
from the active state to the preparing state. Upon receiving responses from all transaction 
participants indicating that they are prepared to commit the transaction, the transaction 

25 manager may request permission to change the state of the transaction from the preparing 
state to the committing state. Upon receiving responses from all transaction participants 
indicating that they have committed the transaction, the transaction manager may request 
permission to change the state of the transaction from the committing state to the 
nonexistent state. 

30 
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[0007] While the transaction manager is frozen no transaction may change state, 
however, the transaction manager may continue to support the execution of transactions 
within their current state. For example, if a transaction is in the preparing state when the 
transaction manager is paused, the transaction manager may continue to receive 
5 responses to the commitment readiness query. When affirmative responses are received 
from all participants, the transaction manager may request permission to change the state 
of the transaction to the committing state, but this permission may be withheld because 
the transaction manager is in paused mode. 

10 [0008] While the transaction manager is paused, the computer system may continue 
normal execution of applications and other system components not utilizing the 
transaction manager. Applications executing transactions may continue to function 
normally for the most part, but may encounter delay when the transaction requires a 
change of state. Components of the system may receive and execute operations on one or 

15 more individual transactions during this time. These operations may include one or more 
of the following: rollback, abort, partial rollback, add/remove participant, and commit. 
For example, if the transaction manager is paused due to the detection of erroneous 
transaction behavior, a system component may receive requests to rollback or abort one 
or more transactions in order to correct the state of one or more of the participating 

20 databases. 

[0009] In some embodiments, pausing and resuming the transaction manager may be 
a function of one or more administrative programs executing as components of the 
computer system. Altematively this function may reside with a human system 
25 administrator who may issue pause and resume commands through a user interface. 

[0010] The facility to pause and resume a transaction manager may reside in one or 
more computer systems executing one or more application servers. The computer 
systems running application servers may be coupled among themselves as well as 
30 coupled to various other end user systems and backend systems through one or more 
networks or network segments. An exemplary network of this type may be the Internet. 
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Administrative entities within this networked computer system may pause and resume 
one or more transaction managers in response to the detection of anomalous transaction 
behavior. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



[0011] FIG. 1 shows an embodiment of a computer system including a transaction 
manager along with one or more applications. 

5 

[0012] FIG. 2 is a flowchart of a method for administrating an application server with 
a transaction manager that can be paused, according to one embodiment. 

[0013] FIG. 3 is a flow chart for a method of operating an application including 
10 transactions, according to one embodiment. 

[0014] FIG. 4 is a state transition diagram for local and global transactions, according 
to one embodiment. 

15 [0015] FIG. 5 is a flowchart of a method for operating a transaction manager, 
according to one embodiment. 

[0016] FIG. 6 shows administrative components of a computer system, according to 
one embodiment. 

20 

[0017] FIG. 7 is a flowchart of a method for operating a transaction freeze manager, 
according to one embodiment. 

[0018] FIG. 8 is a flowchart of a method for operating a transaction freeze manager 
25 as a read/write lock, according to one embodiment. 

[0019] FIG. 9 illustrates the components of a three tier networked computer system, 
according to one embodiment, 

30 [0020] FIG. 10 illustrates the components of an exemplary computer system, 
according to one embodiment. 
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[0021] While the invention is susceptible to various modifications and alternative 
forms, specific embodiments thereof are shown by way of example in the drawings and 
will herein be described in detail. It should be understood, however, that the drawings 
5 and detailed description thereto are not intended to limit the invention to the particular 
form disclosed, but on the contrary, the intention is to cover all modifications, equivalents 
and alternatives falling within the spirit and scope of the invention as defined by the 
appended claims. 
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DETAILED DESCRIPTION OF EMBODIMENTS 



[0022] FIG. 1 illustrates a computer system 140, according to one embodiment. The 
computer system may be configured to execute software including one or more 
5 application programs 100. Application programs 100 may read and/or modify data stored 
in one or more databases 180. Databases 180 may also be referred to as data sources. An 
example of such an application 100 may be a banking application that may query and 
update account information stored in a banking database. In another embodiment, the 
application may be an Internet business application providing electronic sales for a 
10 vendor, and interacting with several of the vendor's databases. 

[0023] Some application programs may require that the results of sets of database 
operations must be committed to permanent storage atomically, that is either all together 
or not at all, in order for the data to remain consistent and to maintain data integrity. 

15 Such a set of operations may be referred to as a transaction. An example of an 
application in which a transaction may be beneficial is a banking application in which 
funds are transferred from one account to another. The application may accomplish the 
transfer by performing a withdrawal from one account and a deposit to another account. 
If the withdrawal operation completes but the deposit operation does not, the first account 

20 may reflect and improper balance. Conversely, if the deposit operation completes, but 
the withdrawal fails, the second account may show an improper balance. In the case of 
such a set of interdependent operations, neither the withdrawal nor the deposit should 
complete unless both can complete. By including both the withdrawal and deposit 
operations in a transaction, the application may designate that the operations are required 

25 to complete atomically. 

[0024] An application may designate operations to be included in a transaction by 
including a statement to initiate a transaction, designating an identity for the transaction, 
and concluding the operations included in the transactions with a command to conmiit the 
30 database operations to permanent storage. 
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[0025] In some embodiments, the initiation of a transaction may result in the 
instantiation of a transaction object. The transaction object may include a unique identity 
for the transaction. Subsequent to transaction initiation, an application may require 
interaction with one or more databases within the scope of the transaction. Each time the 
5 application interacts with a database 180 for the first time, a connection may be 
established between the application and the database. The connection may be used to 
send the transaction object to the database 180. 

[0026] Upon receiving the transaction object, the resource manager associated with 
10 the database 180 may use an enlistment method included with the transaction object to 
enlist as a transaction participant with transaction manager 130. Transaction manager 
130 may enlist each participant in a transaction in order to notify all participants of 
changes in the state of the transaction. Transactions in which only one database is 
accessed may be referred to as local transactions. Transactions in which more than one 
15 database is accessed may be referred to as global transactions. 

[0027] The transaction manager may be configured to pause transactions in progress. 
This pausing of transaction manager function may be referred to as freezing the 
transaction manager. In one embodiment, while the transaction manager is frozen, 
20 transactions may progress within a single state, but may not be allowed to transition to a 
subsequent state. In some embodiments, other functions of the computer system not 
using the transaction manager may proceed normally while the transaction manager is 
paused. The transaction manager may be resumed maintaining continuity of transactions 
and restoring normal operation to functions using the transaction manager. 

25 

[0028] A system administrator or administrative application may pause the 
transaction manager in response to detecting anomalous transaction behavior. For 
example, transaction log entries may indicate that a certain type of transaction is resulting 
in erroneous data being written to a particular database. An administrative entity may 
30 issue a pause request to the transaction freeze manager, thereby pausing the transaction 
manager. While the transaction manager is paused, the administrative entity may issue 
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commands to modify one or more individual transactions in order to correct errors and/or 
prevent system degradation. These commands may result in one or more transactions 
being aborted, rolled back, partially rolled back, or committed. During this intervention, 
non-transactional aspects of applications running on the server may continue to function 
5 normally. After necessary corrective actions have been taken, the function of the 
transaction manager may be resumed, and all remaining paused transactions may 
complete as usual. 

[0029] FIG. 2 is a flowchart of a method for administrative pausing and resuming of 
10 a transaction manager according to one embodiment. At block 200, an administrative 
entity may discover evidence of some transaction-related problem. For example, the 
administrator may note several transactions in which a purchaser ordered one quantity of 
a certain item but the corresponding inventory database indicates a decrement of a 
different quantity after the transactions conmiitted. 

15 

[0030] This discovery may prompt the administrative entity to issue a conmiand to 
pause the transaction manager as shown at 210. In one embodiment, a human 
administrator may issue a command to pause the transaction manager through an I/O 
device associated with a system monitoring station. In another instance, the checking of 

20 transaction logs may be an automated function and an administrative application may 
issue a request to pause the transaction manager. Once state transitions of currently 
executing transactions have been halted, the administrator may take corrective actions as 
illustrated at 220. For example, the administrator may roll back or abort one or more 
currently executing individual transactions that may result in further data corruption. 

25 Further, the administrator may issue commands to preclude the initiation of subsequent 
transactions that would likely result in errors. For example, if all the problematic 
transactions were initiated by a specific application or application component, the 
administrator may issue commands to prohibit the execution of that function. Once the 
administrator has taken appropriate remedial action, he may issue a command to resume 

30 the transaction manager as shown in block 230. 
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[0031] FIG. 3 is a flow chart for a method of operating an application including 
transactions, according to one embodiment. At 300 the application may reach a point 
where it needs to perform atomic operations involving one or more data sources and 
initiate a transaction. The application may establish connections with one or more data 
5 sources, as shown in block 310 and access one or more databases associated with the data 
sources at 320. An example of such interaction may be found in a shopping application. 
The application may allow a customer to select potential purchases from products offered 
by several vendors. Each time the customer adds an item from a particular vendor to his 
shopping cart, the application may establish a connection to that vendor's inventory 

10 database to decrement a quantity available field. The customer may add and remove 
items from his list of potential purchases any number of times during the shopping 
process requiring multiple accesses to multiple data source. At some point the customer 
may decide to complete his purchase. The application may then commit the transaction 
as illustrated by block 330. Conmiitting the transaction may cause the results of the 

15 transaction's database alterations to be made permanent. 

[0032] FIG. 4 illustrates the states and state transitions associated with local and 
global transactions, according to one embodiment. In FIG. 4, state transitions for local 
transactions are represented by solid lines, while those for global transactions are 
20 represented by broken lines. The state transition flow for the global transaction follows 
the flow for a local transaction with the addition of the preparing state 420 between the 
active state 410 and the conmiitting state 430. 

[0033] A local transaction may have three states and three associated state transitions. 

25 In the non-existent state 400, no resources may be allocated to the transaction. The 
initiation of a transaction by an application may be a transition of the transaction from the 
non-existent state to the active state 410. In active state 410, the application may 
communicate with the database to read and/or write one or more units of data stored 
therein. At some point during the execution of a transaction, the application may decide 

30 to make permanent the alterations to the database that it has been processing. This may 
result in a change of state of the transaction from the active state 410 to the committing 
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state 430. In committing state 430, the resource manager may lock all or part of the 
database and write changes that accumulated during the active state of the transaction. 
When the database reports that it has successfully committed all changes, the resources 
associated with the transaction may be released, returning the transaction to the 
5 nonexistent state 400. 

[0034] The states and state transitions for a global transaction may be similar to those 
for a local transaction with the exception of one additional state and transition. The 
number of database participants in a global transaction may be large. In order to insure 
atomicity for a global transaction, the transaction manager may employ a two-phase 
commit protocol for permanently updating the databases. Under a two-phase commit 
protocol, when the application executes the commit command to permanently alter the 
contents of the participant databases, the transaction manager may change the state of the 
transaction from the active state 410 to the preparing state 420. In the preparing state 
420, the transaction manager may query each data source participating in the transaction 
to determine whether or not it is prepared to permanently commit the changes 
accumulated during the active portion of the transaction to the associated database. 
When all transaction participants respond that they are prepared to commit the 
transaction, the transaction manager may change the state of the transaction to the 
committing state 430. 

[0035] In some embodiments, the transaction manager may request transition 
permission from a transaction freeze manager prior to changing the state of a transaction 
from one state to the next. A transaction freeze manager and associated components are 

25 illustrated in FIG. 6, and will be described in greater detail below. By withholding 
transition permission for a transaction, the transaction freeze manager may effectively 
pause the transaction. By withholding transition permission for all transactions being 
coordinated by a transaction manager, the transaction freeze manager may effectively 
pause the transaction manager. Note that in some embodiments the transaction freeze 

30 manager may be part of the transaction manager. 



10 
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[0036] FIG. 5 is a flowchart of a method of operating a transaction manager, 
according to one embodiment. At 510 the transaction manager may receive input to 
change the state of a transaction. For example, the transaction manger may receive and 
indication that an application has executed a commit command for a transaction. If the 
5 transaction is local, the transaction manager may need to change the state of the 
transaction to the committing phase, whereas in the case of a global transaction, the 
transaction manager may need to change the state of the transaction to the preparing 
phase. 

10 [0037] Any time the transaction manager needs to change the state of a transaction 
from one state to another, it may request transition permission from a transaction freeze 
manager, as shown at block 520. Once the transaction manager has requested phase 
transition permission for a particular transaction, it may wait until such permission is 
granted before continuing the processing of the transaction, as indicated in block 530. It 

15 is this wait for permission to change the state of transactions that may allow the 
transaction freeze manager to pause the function of the transaction manager. In some 
embodiments, a transaction may be suspended at 530 for as long as state transition 
permission is withheld. In other embodiments, the transaction manager may only be 
paused for a definite time interval derived from transaction protocol timers running in the 

20 application computer system and participant computer systems. If the transaction is 
paused for too long, the participants may abort the transaction due to the expiration of 
their timers. When a resume transaction manager request is received, permission to 
change the state of a transaction may be granted, and at block 540, the transaction 
manager may proceed with the execution of the transaction. 

25 

[0038] FIG. 6 illustrates administrative components of computer system software 
including a transaction freeze manager 615, according to one embodiment. The 
transaction freeze manager 615 may receive requests from the transaction manager 605 as 
well as administrative applications running on computer system 600. Administrative 
30 entities may include one or more administrative applications 604 as well as a human 
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system administrator 620 in some cases. The system administrator may submit requests 
to the transaction freeze manager through administrative interface 610. 



[0039] Transaction freeze manager 615 may receive transaction transition requests 
5 from transaction manager 605 and transaction manger pause requests from administrative 
entities 604 and 620. Transaction freeze manager 615 may store the received requests in 
request queue 625 in the order in which the requests are received. In some embodiments, 
transaction freeze manager 615 may service queued requests in a manner analogous to 
the servicing of read and write lock requests by a read/write lock manager. In these 
10 embodiments, transaction freeze manager 615 may supervise the locking of transaction 
freeze object 630. 

[0040] FIG. 7 is a flow chart for a method of operating a transaction freeze manager, 
according to one embodiment. As requests are received, they may be queued in the order 
15 in which they are received, as shown at 710. Queued requests may be serviced in FIFO 
order as illustrated in block 720. While the transaction manager is paused, no requests 
may be serviced, as shown at decision block 730. When the transaction manager is 
unfrozen, at decision block 740 the request may be classified as to whether it is a 
transaction state transition permission request or a transaction manager pause request. 

20 

[0041] Any number of requests for transaction state transition permission may be 
granted concurrently. Therefore, once such a request has been identified at 740, 
permission may be granted as shown at block 760. In some embodiments, transaction 
state transitions may complete in a negligible amount of time. In such embodiments, a 
25 request to pause the transaction manager, identified at decision block 740, may be 
granted immediately, as shown at block 750. 

[0042] In other embodiments, transaction state transitions may be of non-negligible 
duration. In these embodiments, the transaction freeze manager may function as a 
30 read/write lock operating on a transaction freeze object. 
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[0043] Under a read/write locking method, two levels of locking may be 
implemented. The first level or read lock may be non-exclusive in that more than one 
entity may acquire a read lock for the same resource concurrently as long as no write lock 
5 has been granted. A request for transaction state transition permission may be 
implemented as a request for a read lock on the transaction freeze object. The transaction 
manager may not be allowed to proceed with a transaction state transition until it receives 
a read lock on the transaction freeze object. 

10 [0044] The second level or write lock is exclusive in that once a write lock is granted, 
no other write lock or read lock may be granted until the write lock is released. Further, a 
write lock may not be granted if there are any outstanding locks of either type. A request 
to pause the transaction manager may be implemented as a request for a write lock on the 
transaction freeze object. Thus, a transition manager pause request may have to wait for 

15 previously permitted transaction state transitions to complete, and all requests may wait 
while the transaction manager is paused. 

[0045] When the transaction manager issues a request to transition the state of a 
transaction, the transaction freeze manager may service this request as a request for a 
20 read lock on a transaction freeze object. If the transaction manager is not frozen, i.e. no 
outstanding write lock, then the transaction freeze manager may grant the transaction 
manager permission to transition the state of the transaction in the form of a read lock on 
the transaction freeze object. The read lock may be granted regardless of any other 
outstanding read locks. 

25 

[0046] When an administrative entity, system administrator or administrative 
application, issues a request to pause the transaction manager, the transaction freeze 
manager may service this request as a request for a write lock on a transaction freeze 
object. If the transaction manager is not already frozen, and there are no incomplete 
30 transaction state transitions, i.e. outstanding read locks, the transaction freeze manager 
may grant a write lock on the transaction freeze object. This may have the effect of 
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pausing the transaction manager because no read locks, i.e. transaction state transitions, 
may be allowed until the write lock is released. 

[0047] FIG. 8 is a flowchart for a method for transaction manager freezing employing 
5 a read/ write lock manager according to one embodiment. At 810, lock requests may be 
queued in the order in which they are received. Lock requests may be serviced in FIFO 
order where the oldest queued request may always be the next request to be serviced as 
shown at 820. In decision block 830, if a write lock on the transaction freeze object has 
been granted thereby pausing the transaction manager, no other lock requests may be 
10 serviced until the write lock has been released. 

[0048] If the transaction manager is unfrozen, i.e. no outstanding write lock, it may 
be determined at decision block 840 that the request is for a read lock on the transaction 
freeze object in order to change the state of a transaction. The read lock request may be 

15 granted at 850 without further analysis, as any number of read locks may be in effect 
concurrently. If the request is for a write lock to pause the transaction manager however, 
a check may be made at decision block 860 to determine whether there are any 
outstanding read locks, i.e. whether all granted transaction state changes have completed. 
If outstanding read locks exist, the lock manager may wait for all transaction state 

20 changes to complete before granting the write lock thereby pausing the transaction 
manager at block 870. 

[0049] In some embodiments, a transaction manager with pause capability may be 
included as a component of an application server in a networked computer system, as 

25 illustrated in FIG. 9. A networked computer system may support the execution of three- 
tier applications. A three-tier application is an application that may be organized into 
three major parts, each of which may be distributed within a networked computer system. 
The three parts (tiers) may include: one or more clients 915 or 917, one or more servers 
901, and one or more back-end systems (e.g. databases 909 or 911) along with their. 

30 management functions 907. In the first tier, a client may be a program running on a 
user's computer that includes a graphical user interface, application-specific entry forms. 
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and/or interactive windows for interacting with an application. An exemplary client may 
be a web browser that allows a user to access the Internet. In the second tier, a server 
may be a program such as an application server that contains the business logic for an 
application such as banking transactions or purchasing merchandise for the user of a 
5 client. The server may be running on one or more computers. 

[0050] A plurality of client systems may connect to one or more servers as 
components of a network 913. An exemplary network of this type is the Internet. Clients 
may submit various types of requests to servers. Often the server may be able to fulfill 

10 the client's request using only resources internal to the server system. In other instances, 
resources external to the server may need to be accessed in order to provide the requested 
service. This type of request may require the establishment of a connection between the 
server and a backend system including one or more databases 909 or 911 and 
corresponding resource managers 907. A connection may be a set of computer system 

15 resources and parameters, which allows communications between two or more entities 
within the system. 

[0051] The third tier of a three-tier application may include one or more backend 
systems. A backend system may include one or more databases 911 and programs that 

20 facilitate access to the data they contain. Databases on backend systems may be referred 
to as data sources. In order to perform a particular function, an application 903 may need 
to retrieve and/or alter data in multiple databases resident on multiple backend systems. 
A set of two or more related operations that must be coordinated together atomically may 
be referred to as a transaction. A transaction involving more than one data source may be 

25 referred to as a distributed or global transaction. 

[0052] An example of a global transaction is a customer purchasing a product via the 
Internet. A customer may use the web browser component of a client 917 to browse vyeb 
sites stored on multiple application servers coupled to the client system through the 
30 Internet. When the customer begins browsing a vendor's web site, and application may 
initiate a transaction to coordinate all web site activities associated with that customer. 
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The transaction manager may request permission from the transaction freeze manager to 
change the state of the transaction to the active state and when permission is granted, 
begin enlisting participants. 

5 [0053] While the transaction is in the active state, the customer may exercise 
options offered by the appHcation. For example, if the customer is shopping for travel 
arrangements, the application may offer the option of comparing rates among several 
airlines. To obtain the necessary pricing information, the application 903 may need to 
establish connections with, and obtain flight data from databases 909 belonging to 
10 multiple airline companies. 

[0054] As the application 903 accesses a new data source, the resource manager 907 
associated with the data source may enlist with the transaction manager 105 running on 
application server 901. Transaction manager 905 may then be responsible for 
15 conmiunicating changes in the state of the transaction to all enlisted participants. As the 
customer progresses through his selection process, he may request many other types of 
information relevant to the offered flights requiring the application to access other data 
sources. For example, the customer may request comparative cost data for flights leaving 
on various days or at various times of the day in order to find the lowest priced option. 

20 

[0055] As the customer makes selections offered by the travel application, the 
participating data sources may alter/update copies of data from associated databases. If 
the customer should abandon his search before making a purchase, the application 903 
may instruct the transaction manager 905 to roll back the transaction. The transaction 
25 manager 905 may issue a roll back command to all participants enlisted in the 
transaction. Upon receiving a roll back conmiand, each transaction participant may 
discard the altered copies of data associated with the transaction. In this way, the 
integrity of the participating databases may be maintained. 

30 [0056] Once the customer has made his selection and supplied the information 
necessary to make the purchase, the application 903 may issue a command to commit the 
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transaction. Since the transaction involves multiple data sources, transaction manager 
905 may use a two-phase commit protocol to insure transaction atomicity. Transaction 
manager 905 may request permission form transaction freeze manager 925 to change the 
state of the global transaction from the active state to the preparing state. If the 
5 transaction manager is not paused, the transaction freeze manager 925 may grant 
permission for the transition. Transaction manager 905 may query each participant data 
source as to whether the resource manager 907 is prepared to conmiit the accumulated 
changes associated with the transaction to the database 911. 

10 [0057] Upon receiving affirmative responses from all participants, transaction 
manager 905 may request permission to change the state of the transaction to the 
committing state. With the receipt of transition permission, the transaction manager 905 
may send a commit command to the resource manager 907 of all participating data 
sources. In response to the commit conmiand, the resource manager 907 may write the 

15 altered data associated with the transaction to the corresponding database 911 and send a 
completed response to the transaction manager 905. When all participants have 
responded that the transaction has been committed, the transaction manager 905 may 
request permission to change the state of the transaction to the nonexistent state. 

20 [0058] If the transaction freeze manager 925 receives a transaction manager pause 
request from an administrative entity, it may withhold transaction state transition 
permission from the transaction manager. Should this occur while a transaction is in the 
active state, application 903 may continue to access data sources and transaction manager 
905 may continue to enlist the corresponding resource managers 907 as participants in 

25 the transaction. Therefore, the application will continue normal execution of the 
transaction until the commit conmiand is executed, requiring a change of state in the 
transaction. 

[0059] Large networked computer systems may include a plurality of application 
30 servers coupled to a wide variety of client systems and backend systems. The application 
servers mnning transaction-oriented applications may each include a transaction manager 
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and means for pausing the transaction manager while continuing to execute non- 
transaction related functions as usual. This functionality may further include the 
capability to resume the transaction manager and the transactions that it was coordinating 
at the time it was paused to allow them to complete normally. 

5 

[0060] FIG. 10 illustrates one embodiment of a computer system 1000 that may 
include a transaction freeze manager 1050 that is able to pause a transaction manager 
1005, Computer system 1000 may include many different components such as memory 
1010, a central processing unit (CPU) or processor 1020, and an input/output (1/0) 
10 interface 1025. Interconnect 1015 is relied upon to communicate data from one 
component to another. For example, interconnect 1015 may be a point-to-point 
interconnect, a shared bus, a combination of point-to-point interconnects and one or more 
buses, and/or a bus hierarchy including a system bus, CPU bus, memory bus and I/O 
buses such as a peripheral component interconnect (PCI) bus. 

15 

[0061] The computer system 1000 preferably includes a memory medium on which 
computer programs according to various embodiments may be stored. The term 
"memory medium may include an installation medium, e.g., a CD-ROM, or floppy disk; 
a computer system memory such as DRAM, SRAM, EDO DRAM, SDRAM, DDR 

20 SDRAM, Rambus RAM, etc., or a non-volatile memory such as a magnetic media, e.g., a 
hard drive 1030, or optical storage. The memory medium may include other types of 
memory as well, or combinations thereof. In addition, the memory medium may be 
located in a first computer in which the programs are executed, or may be located in a 
second different computer, which connects to the first computer over a network through 

25 network adapter 1035. In the latter instance, the second computer provides the program 
instructions to the first computer for execution. 

[0062] Also, the computer system 1000 may take various forms, including a personal 
computer system, mainframe computer system, workstation, network appliance, Internet 
30 appliance, personal digital assistant (PDA), television system or other device. In general, 
the term "computer system" can be broadly defined to encompass any device having a 
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processor, which executes instructions from a memory medium. The memory medium 
preferably stores a software program or programs for event-triggered transaction processing 
as described herein. The software program(s) may be implemented in any of various ways, 
including procedure-based techniques, component-based techniques, and/or object-oriented 
5 techniques, among others. For example, the software program may be implemented using 
ActiveX controls, C++ objects, JavaBeans, Microsoft Foundation Classes (MFC), or other 
technologies or methodologies, as desired. 

[0063] Memory 1010 may store program instructions accessed by the CPU 1020. For 
10 example, instructions and data implementing a transaction freeze manager 1050 that is 
able to pause a transaction manager 1005 may be stored in memory 1010. An operating 
system 1055 may also be stored in memory 1010. 

[0064] Computer system 1000 may further include other software and hardware 
15 components, such as an input/output (FO) interface 1025, that may be coupled to various 
other components and memory 1010. The CPU 1020 may acquire instructions and/or data 
through the I/O interface 1025. Through the I/O interface 1025, the CPU 1020 may also 
be coupled to one or more I/O components. As illustrated, I/O components may include 
a hard disk drive 1030, a network adapter 1035, a display adapter 1040 and/or a 
20 removable storage adapter 1045. Some components 1030 to 1045 may be coupled to the 
I/O interface 1025. In addition, the computer system 1000 may include one or more of a 
particular type of component. The computer system 1000 may include one or more 
components coupled to the system through a component other than the I/O interface 
1025. Some computer systems may include additional and/or other components than 
25 shown in Figure 10 such as application software (e.g., stored in memory 1010), other 
CPUs, video monitors or other displays, track balls, mice, keyboards, printers, plotters, 
scanners, or other types of VO devices for use with computer system 1000. 

[0065] Various embodiments may further include receiving, sending, or storing 
30 instructions and/or data implemented in accordance with the foregoing description upon a 
computer readable medium. Generally speaking, a computer readable medium may 
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include storage media or memory media such as magnetic or optical media, e.g., disk or 
CD-ROM, volatile or non-volatile media such as RAM (e.g. SDRAM, DDR SDRAM, 
RDRAM, SRAM, etc.), ROM, etc. as well as transmission media or signals such as 
electrical, electromagnetic, or digital signals, conveyed via a communication medium 
5 such as network and/or wireless link. 



[0066] Note that the flow charts described herein represent exemplary embodiments 
of methods. The methods may be implemented in software, hardware, or a combination 
thereof. The order of method may be changed, and various elements may be added, 
10 reordered, combined, omitted or modified. 

[0067] Various modifications and changes may be made to the invention as would be 
obvious to a person skilled in the art having the benefit of the disclosure. It is intended 
that that the following claims be interpreted to embrace all such modifications and 
15 changes and, accordingly, the specifications and ^awings are to be regarded in an 
illustrative rather than a restrictive sense. 
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